← Back

Hrworks

hrworks

Vendor: Hrworks • 3 CVEs

CVEs (3)

CVE
VENDORS
PRODUCTS
UPDATED
PUBLISHED
CVSS
1Hrworks
1Hrworks
Jun 17, 2026
Oct 8, 2019
N/A· v4
5.4 MEDIUM· v3
3.5 LOW· v2
HRworks FLOW 3.36.9 allows XSS via the purpose of a travel-expense report.
1Hrworks
1Hrworks
Jun 17, 2026
Oct 8, 2019
N/A· v4
5.4 MEDIUM· v3
3.5 LOW· v2
HRworks 3.36.9 allows XSS via the purpose of a travel-expense report.
1Hrworks
1Hrworks
Jun 17, 2026
Sep 17, 2019
N/A· v4
6.1 MEDIUM· v3
4.3 MEDIUM· v2
A reflected Cross-site scripting (XSS) vulnerability in HRworks V 1.16.1 allows remote attackers to inject arbitrary web script or HTML via the URL parameter to the Login component.